CVE-2018-0042

Juniper Networks CSO is affected by an information disclosure vulnerability in versions prior to 4.0.0, caused by the CSO software logging passwords in log files. An attacker could obtain sensitive credentials from logs. A fixed version is CSO 4.0.0 or later; remediation is to upgrade to the patc...

CVE-2018-0042

Juniper Networks CSO versions prior to 4.0.0 may log passwords in log files leading to an information disclosure vulnerability...

cso-deprinsenhof.nl XSS vulnerability

Open Bug Bounty ID: OBB-638851 Description| Value ---|--- Affected Website:| cso-deprinsenhof.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Akamai CSO Talks Cryptominers, IoT and the Reemergence of Old Threats

SAN FRANCISCO – Andy Ellis, CSO Akamai, discusses how the company works with others within the cybersecurity landscape to help keep the internet safe. In an interview with Threatpost’s Tom Spring, he also covers the company’s latest installment of its State of the Internet report. Ellis discusses...

Gopher gophermap Scanner

This module identifies Gopher servers, and processes the gophermap file which lists all the files on the server. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Gopher gophermap Scanner',...

cso.gov.tt XSS vulnerability

Vulnerable URL: http://cso.gov.tt/help/%22%3E%3Csvg%20onload=alert/XSSPOSED/%3E/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1820086 VIP website status:| No Check cso.gov.tt SSL...

Black Hat USA 2017 Preview

Mike Mimoso and Tom Spring preview Black Hat, which starts tomorrow in Las Vegas, including some thoughts on what call to action Facebook CSO Alex Stamos may deliver in his keynote address, along with some important topics and sessions that are sure to pop up throughout the week. Download: Black...

July 5, 2017 – Morning Cyber Coffee Headlines – “Isaac Newton” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! July 5, 2017 - Headlines Carbon Black in the News: Carbon Black’s Cb Defense...

CSO Wipro Unza - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application CSO Wipro Unza published at the 'play' market has multiple vulnerabilities...

Facebook Hires Ex-Yahoo CISO Alex Stamos

Facebook has hired away the top security executive at Yahoo, Alex Stamos, to become the company’s new CSO. Stamos said Wednesday that he is joining Facebook because he believes the company is in the best position to address some of the large security challenges facing users and companies right no...

Brad Arkin Named Adobe CSO

Adobe has named Brad Arkin to the newly created position of CSO, a major expansion of responsibilities for Arkin, who has been leading the company’s product security and privacy initiatives. Adobe has been in the security spotlight for several years now, as attackers have focused their attention ...

Foxit Reader Plugin for Firefox URL Filename Stack Buffer Overflow

Added: 01/12/2013 BID: 57174 OSVDB: 89030 Background Foxit Reader is a free PDF reader for Microsoft Windows systems. Problem Foxit Reader plugin for Firefox npFoxitReaderPlugin.dll is vulnerable to remote code execution as a result of failure to check boundary conditions when processing a URL...

Former Pennsylvania CSO Maley Speaks

Robert Maley was fired from his job as the chief information security officer for the state of Pennsylvania earlier this month after he spoke, without proper authorization, about security incidents involving the state during a panel discussion at the RSA trade show. In this interview, Maley gives...

State CSO Fired for Talking Openly at RSA

Pennsylvania’s chief information security officer, Robert Maley, has been fired, apparently for talking publicly at the RSA security conference last week about a recent incident involving the Commonwealth’s online driving exam scheduling system. Read the full article. Computerworld...

New Cybersecurity Coordinator Howard Schmidt

Howard A. Schmidt, the former CSO of Microsoft and former security adviser to President George W. Bush, was named White House Cybersecurity Coordinator on Tuesday...

Real World Security – Bob Maley Interview

In the first installment of a new regular series, Dennis Fisher talks with Bob Maley, the CSO of the Commonwealth of Pennsylvania, about the challenges of running an information security program in a government agency, the effects of the economy on his efforts and the ways in which user education...

David Mortman on compliance, the changing job of the CSO and baking bread

Digital Underground podcast with Dennis Fisher In this episode of the Digital Underground podcast, Dennis Fisher talks with David Mortman, CSO-in-residence at Echelon One and longtime security executive, about whether we’ve become too reliant on compliance, the changing nature of the CSO’s job an...

Unfixed XSS vulnerability at www.grupoe1.com.br

Security researcher CSO-BR, has submitted on 28/06/2007 a cross-site-scripting XSS vulnerability affecting www.grupoe1.com.br, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/06/2007. It is currently...